MCP Registry v1.8.1
MCP Registry v1.8.1 fixes an authentication vulnerability by rejecting github.io domains during token exchange, addresses GO-2026-5970 via dependency updates, and adds caching for bulk registry reads.
原始内容为英文；当前页面提供中文导航与来源说明，具体事实请以原文为准。
为什么值得关注
MCP Registry v1.8.1 introduces several security fixes, operational improvements, and dependency updates. Key highlights include: - Auth Security Fix: Rejects github.io domains in DNS/HTTP token exchange to prevent potential organization namespace takeover attacks (PR 1506). - Vulnerability Remediation: Bumps golang.org/x/text to v0.39.0 to address security advisory GO-2026-5970. - Performance/Deployment: Implements caching for bulk registry reads to improve query efficiency. - Dependencies: Updates various build, deployment, and cloud SDK dependencies including Pulumi, Cloud KMS, and gRPC.
可执行摘要
MCP Registry release v1.8.1 includes a critical auth fix rejecting github.io domains in DNS/HTTP token exchange to prevent org namespace takeovers (PR 1506). It also updates golang.org/x/text for vulnerability GO-2026-5970 and caches bulk registry reads.
- Agent 实用度
- 82/100
- 可信度
- 96%
- 机器格式
- JSON + Markdown
开发者应核对什么
- Upgrade MCP Registry instances to v1.8.1 to apply the auth fix preventing github.io domain namespace takeovers.
- Review custom domain configurations used in DNS/HTTP token exchange if previously relying on github.io domains.